200-301 · Question #640
After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply
The correct answer is D. username localuser secret plaintextpassword. To secure the console port with local authentication using a username and password, one must first define the local user with the username command.
Question
After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply to accomplish this task?
Options
- Aaaa new-model
- Baaa new-model
- Cusername localuser secret plaintextpassword
- Dusername localuser secret plaintextpassword
How the community answered
(39 responses)- A8% (3)
- B5% (2)
- C15% (6)
- D72% (28)
Why each option
To secure the console port with local authentication using a username and password, one must first define the local user with the `username` command.
`aaa new-model` enables the AAA framework, but it does not directly create a local user or apply it to the console port in the most basic scenario.
`aaa new-model` enables the AAA framework, which is for more advanced authentication schemes, but it's not the direct command to create a local user for console access.
This choice is identical to D, which is the correct answer.
The command `username localuser secret plaintextpassword` defines a local user account with a specified username and a *plaintext* secret password. This local user account can then be used for authentication on the console port by configuring `login local` under the `line console 0` interface.
Concept tested: Local user configuration for console access
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-3s/sec-usr-aaa-xe-3s-book/sec-usr-aaa-loc.html
Topics
Community Discussion
No community discussion yet for this question.